PT-2006-1411 · Bitcomet · Bitcomet Client+1
Fortinet Security Research
·
Published
2006-01-20
·
Updated
2018-10-19
·
CVE-2006-0339
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
BitComet Client version 0.60
Description
The issue allows remote attackers to execute arbitrary code when the publisher's name link is clicked, via a long publisher URI in a torrent file. This occurs because the BitComet Client fails to check the size of the publisher's name URI in a torrent file, resulting in a buffer overflow. With a specially crafted request, an attacker can execute arbitrary code, potentially resulting in a loss of availability.
Recommendations
For BitComet Client version 0.60, consider disabling the handling of publisher's name links in torrent files until a patch is available to prevent arbitrary code execution. Restrict access to torrent files with long publisher URI to minimize the risk of exploitation.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Bitcomet
Bitcomet Client